{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"10.1.5"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2023-4822"],"ecosystem":"Go","epss":0.01264,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-fw9c-75hh-89p6","id":"tcs_01M5KF9XAHF97AW610648G6KVV","modified_at":"2026-08-07T08:12:30.751768220Z","published_at":"2023-10-16T09:30:19Z","references":["https://osv.dev/vulnerability/GHSA-fw9c-75hh-89p6","https://nvd.nist.gov/vuln/detail/CVE-2023-4822","https://github.com/grafana/grafana","https://grafana.com/security/security-advisories/cve-2023-4822","https://security.netapp.com/advisory/ntap-20231103-0008"],"severity":{"label":"medium","score":6.7},"sources":[{"source":"osv","source_id":"GHSA-fw9c-75hh-89p6","url":"https://osv.dev/vulnerability/GHSA-fw9c-75hh-89p6"}],"summary":"Grafana privilege escalation vulnerability"}